CVE-2025-34227 - CVE House

Back to Database

Status published High CVE-2025-34227

Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

8.6 CVSS

Vulnerability Description

Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34227

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

M. Cory Billington of theyhack.me

References

More from Nagios

View All →

Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only...

Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve...

Nagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules

Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation

Affected Vendor

Nagios

View all reports →

Affected Software

Nagios XI

Vulnerable Versions:

0

Timeline

Official Publish: September 25th, 2025

Last Modified: May 15th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1005 Data from Local System

T1041 Exfiltration Over C2 Channel